Simon Köck personal blog
I Found a $90k Remote Code Execution Vulnerability in Google
A Flask cookie on developers.google.com was signed with a secret it carried inside itself. Pulling that secret out turned a forged session into code execution across Google's developer sites.
- Points
- 240
- HN comments
- 123
- Submissions
- 1
- Cited by
- 0 commenters
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Oct 12, 2026 | I Found a $90k Remote Code Execution Vulnerability in Google by soeckly | 240 | 123 |
